This Page Is Inserted by IFW Operations 
and is not a part of the Official Record 

BEST AVAILABLE IMAGES 



Defective images within this document are accurate representations of the 
original documents submitted by the appHcant. 

Defects in the images may include (but are not limited to): 



• BLACK BORDERS 

e TEXT CUT OFF AT TOP, BOTTOM OR SIDES 

• FADED TEXT 

• ILLEGIBLE TEXT 

• SKEWED/SLANTED IMAGES 

• COLORED PHOTOS 

• BLACK OR VERY BLACK AND WHITE DARK PHOTOS 

• GRAY SCALE DOCUMENTS 



IMAGES ARE BEST AVAILABLE COPY. 



As rescanning documents will not correct images, 
please do not report the images to the 
Image Problems Mailbox. 



United States Patent [ly] 

Sehr 



US005875432A 

[11] Patent Number 
|45| Date of Patent: 



5,875,432 
I eb. 23, 1999 



[54] COMPUTERIZED VOTING INFORMATION 
SYSTEM HAVING PREDEFINED CONTENT 
AND VOTING TEMPLATES 

1 76] Inventor: Richard Peter Sehr, 2276 Creek Bed 
Ct., Santa Clara, Calif. 95054 

[21] Appl. No.: 802,163 

[22] Filed: Feb. 15, 1997 

Related U.S. Application Data 

[63] Continuation of Ser. No. 286,215, Aug. 5, 1994. 

[51] Int. CI.** G06F 17/60; G07C 13/00 

[52] U.S. CI 705/12; 434/306; 235/50 A; 

235/50 B; 235/386 

[58] Field of Search 705/1, 12, 41; 

434/306; 235/51, 50 R, 50 A, 50 B, 54 F, 
56, 57, 386 

[56] References Cited 

U.S. PATENT DOCUMENTS 

4,641,240 2/1987 Boram 364/409 

4,649,264 3/1987 Carson 235/54 R 

4,774,665 9/1988 Webb 364/409 

4,961,229 10/1990 Takahashi 395/2.55 

5,056,086 10/1991 Ubonati 370/62 

5,189,288 2/1993 Anno et a) 235/386 



5,218,528 6/1993 Wise et al 364/409 

5.278.753 1/1994 Craft, III 364/409 

5,377,009 12/1994 Miyagawa 364/409 

5,400,248 3/1995 CKisholm 364/409 

5,412,727 5/1995 Drcxicr ct al 380/24 

5,497,318 3/1996 Miyagawa el al 364/409 

5,583,329 12/1996 Davis, III et al 235/50 A 

OTHER PUBLICATIONS 

Everest: Database Management (textbook); published 1986 
by McGraw-Hill, Inc., p. 746 [single page cited]. 
Microsoft Press Computer Dictionary, 2"'' Edition, pub- 
lished 1993 by Microsoft Press, p. 363. 

Primary Examiner — -Joseph 'iliomas 

[57] ABSTRACT 

A computerized voting information system that encom- 
passes one or more voting stations, at least one tabulation 
center and certification center, and a plurality of voters so as 
to automatically verify, manipulate, interchange, and man- 
age all data and information that is needed by the voting 
stations to determine if a particular voting card is authentic 
and a voter is entitled to cast his/her vote, by tabulation 
centers to perform the tabulation of the casted votes, by 
certification centers to guarantee the authenticity of the 
voting cards and the legitimacy of the card holders, and by 
voters to prove their identity and voting eligibilities. 

19 Claims, 9 Drawing Sheets 







VOTING CARD - CONTENT 




BUTTON 


1 BUTTON 


. 


1 BLTTON 










VOTER - DEMOGRAPHICS 



I BOX I l>nET,: I BOX | LABEL; 



] LABEL: | BOX | LABEL: | DQX 



LEVELS OF PROTECTION 




1 CARD^ECURTFY 1 


1 VOTER-SECURrrV 1 


1 VOTING RIGHTS | 


DESCRIPTION: 


□ 


DtSCRIPTION: 


□ 


DESCKIfriON: j j 


DESCRIFnON: 


□ 




□ 


DESCRIPTION: | | 



AcnvrrY/AUDiT trail 


DATt 


SUMMARY OF 


ABBREVIATED/ 


TYPE/NATliRR Of 


or 


ACriVJTtES 


CODED LIST OF 


THE CASTED 


ArnviTY 


PRRFORMED 


SKt.F.CrF.F> TOPIC J 


VOTES 












DESCRIPTION 




TomorrTLC 




yr:S/N0/OI HbR 




DLSCKiniON 




TOPIC/TITLE 




YES/NO/OTHFR 


%%!t,jj\xxx 


DESCRIPTION 




TOPIC/TITLE 




Yf.S/NOt)rHER 











05/14/2003, EAST Version: 1.03.0002 



U.S. Patent 



Feb. 23, 1999 



Sheet 1 of 9 



5,875,432 




05/14/2003, EAST Version: 1.03.0002 



I , U.S. PateMt Feb. 23, 1999 Sheet 2 of 9 5,875,432 

I 



HEADING 



SECTION 1 



SECTION 2 



BUTTON 


BUTTON 




BUTTON 



FIG. 2 



05/14/2003, EAST version: 1.03.0002 



U.S. Patent 



Feb. 23, 1999 



Sheet 3 of 9 



5,875,432 



VOTING CARD - CONTENT 



BUTTON 



BUTTON 



BUTTON 



VOTER - DEMOGRAPHICS 



LABEL: 



BOX 



LABEL: BOX LABEL: BOX 



LABEL: BOX LABEL: BOX LABEL: 



BOX 



LABEL: 



BOX 



LABEL: 



BOX 



LEVELS OF PROTECTION 



CARD-SECURITY 



DESCRIPTION: 



□ 



VOTER-SECURITY 



DESCRIPTION: 



□ 



VOTING RIGHTS 



DESCRIPTION: 



□ 



DESCRIPTION: 



□ 



DESCRIPTION: 



□ 



DESCRIPTION; 



n 



ACTIVITY/ AUDIT TRAIL 



DATE 
OF 
ACTIVITY 



SUMMARY OF 
ACTIVITIES 
PERFORMED 



ABBREVIATED/ 
CODED LIST OF 
SELECTED TOPICS 



TYPE/NATURE OF 
THE CASTED 
VOTES 



xx/xx/xxxx 
xx/xx/xxxx 



xx/xx/xxxx 



DESCRIPTION 
DESCRIPTION 



DESCRIPTION 



TOPIC/TITLE 
TOPIC/TITLE 



TOPIC/TITLE 



YES/NO/OTHER 
YES/NO/OTHER 



YES/NO/OTHER 



FIG, 3 



05/14/2003, EAST Version: 1.03.0002 



U.S. Patemlt 



Feb. 23, 1999 



Sheet 4 of 9 



5,875,432 



VOTING - TEMPLATE 



BUTTON 



BUTTON 



BUTTON 



AUTHEISTICATION - PROCESS 



□ CARD 
VERIFICATION 



OPTION □ 



OPTION □ 



□ IDENTITY 
RECOGNITION 



OPTION □ 



OPTION □ 



] VOTING 
RIGHTS 



OPTION □ 



OPTION □ 



VOTING CeOICES/SELECTHONS 



MULTILINGUAL LIST OF SUBJECTS/ DESCRIPTION OF NATURE OF THE 

VOTING TOPICS TO THE POSSIBLE CASTED VOTES/ 

INSTRUCTIONS CHOOSE FROM CHOICES CHOICES 



□ STEP I 

□ STEP 2 



□ STEP n 



□ STATEMENT 

□ STATEMENT 



□ STATEMENT 



DESCRIPTION 
DESCRIPTION 



DESCRIPTION 



□ YES □ NO 

□ YES □ NO 



□ YES □ NO 



FIG. 4 



05/14/2003, EAST Version: 1.03.0002 



UoSo Pattemit Feb. 23, 1999 Sheet 5 of 9 



TABULATION - TEMPLATE 



BUTTON 



BUTTON 



BUTTON 



TABULATING - CENTER 



LABEL: 



LABEL: 



LABEL: 



BOX 



LABEL: BOX LABEL: BOX 



BOX LABEL: BOX LABEL: 



BOX 



LABEL: 



BOX 



BOX 



CERTIFICATION - CENTER 



LABEL: 



LABEL: 



LABEL: 



BOX 



BOX 



LABEL: 



BOX 



LABEL: 



LABEL: 



BOX 



LABEL: 



BOX 



BOX 



BOX 



ACTIVITY/AUDIT TRAIL 


DATE OF 


VOTING TOPICS/ 


TYPE/NATURE OF 


CUMULATIVE 


ACTIVITY 


MAIN CATEGORIES 


THE CASTED VOTE 


VOTE-NUMBER 










xx/xx/xxxx 


DESCRIPTION 




YES/NO/ABSTAIN 




TOTAL NUMBER 


xx/xx/xxxx 


DESCRIPTION 




YES/NO/ABSTAIN 




TOTAL NUMBER 


xx/xx/xxxx 


DESCRIPTION 




YES/NO/ABSTAIN 




TOTAL NUMBER 











FIG. 5 



05/14/2003, EAST version: 1.03.0002 



UoSo Palteet Feb. 23, 1999 sheet 6 of 9 5987S,43 





START 




100. 1 


100 




100.2 


INFORMATION SYSTEM 




SELECT COMMANDS, 




DISPLAY RELATED 




APPLICATIONS 
SOFTWARE PROGRAMS 




TASKS & FUNCTIONS 
TO BE EXECUTED 




TEMPLATES, MENUS, 
SCREENS, ... 






101 










VOTER ARRIVES AT 
VOTING STATION TO 
CAST HIS/HER VOTE 




102.1 








102 






VOTING CARD/BOX 




VOTER INSERTS HIS/ 




DISPLAY THE VOTING 




VIA THE CARD 
READING MODULE 




HER VOTING CARD 
INTO THE VOTING BOX 




TEMPLATE ONTO THE 
SCREEN 






103 




102.2 






VOTER FOLLOWS THE 
ON-SCREEN MENUS/ 
INSTRUCTIONS 




104, t 


104 






AUTHENTICITY FILES/ 




SYSTEMS CHECKS IF 




DATABASE OF VOTING 
STATIONS 




THE VOTING CARD IS 
AUTHENTIC 






105 




105,1 




VOTING CARD 


No 


DISPLAY "NOT 






AUTHENTIC 

7 




AUTHENTIC" CARD; 
TRY ANOTHER CARD 




106.1 




106 


Yes 


1 








BIOMETRICS IN 




VERIFIES IF THE 




VOTING CARD AND 
LIVE BIOMETRICS 




CARDHOLDER IS 
RECOGNIZED 






107 




107.1 




CARDHOLDER 


No 


DISPLAY •'HOLDER 






RECOGNIZED 

7 




NOT RECOGNIZED"; 
TRY ANOTHER CARD 




108.1 




108 


Yes 


1 








DATABASE/VOTING 




VERIFIES IF CARD 




RIGHT FILES OF THE 
VOTING STATION(S) 




AND/OR HOLDER ARE 
AUTHORIZED TO VOTE 














109/FIG. 68 




109.1/FIG. 6B 

















no. 6A 



05/14/2003, EAST Version: 1.03.0002 



U.S. Patent 



Feb. 23, 1999 



Sheet 7 of 9 



5,875,432 





108/FIG. 6A 




102/FIG. 6A 




109 




109.1 




AUTHORIZED 


No 


DISPLAY MESSAGE 




CARD/VOTER 

7 




"NOT AUTHORIZED"; 
TRY ANOTHER CARD 


IIO.I 


110 


Yes 


1 


DATABASE/VOTING 




VOTER SELECTS 




STATION AND VOTING 
TEMPLATE 




TOPICS AND CASTS 
HIS/HER VOTES 




111. I 


111 






VOTING STATION 




ESTABLISH AUDIT 




DATABASE AND 
VOTING CARD 




TRAIL OF THE VOTING 
ACTIVITIES 





END 



FIG. 6B 



05/14/2003, EAST Version: 1.03.0002 



U.S. PateEit 



Feb. 23, 1999 



Sheet 8 of 9 



5,875,432 





START 




200.1 


200 




200.2 


INFORMATION SYSTEM 




SELECT COMMANDS, 




DISPLAY RELATED 




APPLICATIONS 
SOFTWARE PROGRAMS 




TASKS & FUNCTIONS 
TO BE EXECUTED 




TEMPLATES, MENUS, 
SCREENS, ... 






201 














VOTER REQUES TS THE 
ISSUANCE OF A 
VOTING CARD/RIGHTS 




202.1 


202 






CERTIFICATION 




CERTIFICATION 




CENTER DATABASE, 
VOTER-ID DOCUMENTS 




CENTER VERIFIES THE 
VOTER'S IDENTIFY 






203 




203.1 




POSITIVE 


No 


DISPLAY "VOTER NOT 






IDENTIF 


ICATION 
) 




IDENTIFIED"; TRY 
ANOTHER VOTER 




204.1 


204 


Yes 


204.2 ' 


VOTING CARD 




ENTERS THE VOTER'S 




DISPLAY THE VOTING 




AND CERTIFICATION 
CENTER^S DATABASE 




DEMOGRAPHIC DATA 
INTO VOTING CARD 




CARD CONTENT ONTO 
THE SCREEN 




205.1 


205 








BOX/BEHAVIORAL 




SELECTS & LOADS THE 




AND PSYCHOLOGICAL 
BIOMETRICS & CARD 




SECURITY LEVELS 
INTO VOTING CARD 




206.1 


206 






VOTING CARD 




CERTIFIES THE CARD 




AND CERTIFICATION 
CENTER'S DATABASE 




AS BELONGING TO A 
PARTICULAR VOTER 




207.1 


207 






VOTING STATION AND 




FORWARD PERTINENT 




TABULATION CENTER 
DATABASES 




DATA TO THE OTHER 
VOTING ENTITIES 




208,1 


208 






VOTING CARD 




ESTABLISH AUDIT 




AND CERTIFICATION 
CENTER'S DATABASE 




TRAIL OF THE CARD 
ISSUANCE PROCESS 














END 





FIG. 7 



05/14/2003, EAST version: 1.03.0002 



U.S. Pattemt Feb. 23, 1999 Sheet 9 of 9 5,875,432 





START 




300.1 


300 




300.2 


INFORMATION SYSTEM 




SELECT COMMANDS, 




DISPLAY RELATED 




APPLICATIONS 
SOFTWARE PROGRAMS 




TASKS & FUNCTIONS 
TO BE EXECUTED 




TEMPLATES, MENUS, 
SCREENS, ... 






301 








SYSTEM FACILITATES/ 
COMMENCES THE 
TABULATION PROCESS 




302.1 




302 












VOTING STATION AND 




VERIFIES IF CENTER IS 




TABULATION CENTER 
DATABASES 




AUTHORIZED TO 
TABULATE THE VOTES 






303 




303.1 




AUTHORIZED 


No 


DISPLAY "NOT AN 






USER 

7 




AUTHORIZED USER**; 
TRY ANOTHER TASK 












304.1 


304 Yes 






DATABASE/ VOTING 




READS THE VOTING 




STATION & SECURITY/ 
AUTHENTICITY FILES 




DATA AND VERIFIES 
ITS AUTHENTICITY 






305 




305.1 




AUTHENTIC 


No 


DISPLAY "NOT 






DATA 

7 




AUTHENTIC DATA**; 
TRY DIFFERENT DATA 




306 J 




306 


Yes 


1 






TABULATION 




READ AND SORT THE 




TEMPLATE & VOTING 
STATION DATABASE 




CONTENTS OF THE 
VOTING FILES 






307 




307.1 




CALCULATE THE 




DISPLAY THE DATA 






CUMULATIVE NUMBER 
OF VOTES PER TOPIC 




WITHIN TABULATION 
TEMPLATE 




308.1 


308 




308.2 


TABULATION CENTER 




ESTABLISH AUDIT 




DISTRIBUTE/PRINT 




DATABASE AND 
VOTING CARD 




TRAIL OF THE 
TABULATION PROCESS 




THE APPROPRIATE 
TABULATION RESULTS 














END 





FIG. 8 



05/14/2003, EAST Version: 1.03.0002 



5,875,432 

1 2 

COMPUTERIZIlO voting information syslems will handle the exchange of data and information in 

SYSTEM HAVING PREDEFINED CONTENT a real-time manner, (5) What are the privacy concerns and 

AND VOTING TEMPLATES security requirements that are needed, and (6) How the 

systems will adopt to future needs and developments. 

This is a continuation of application Scr. No. 08/286,215 5 Accordingly, there still is a need for a system that provides 

filed Aug. 05, 1994 answers to these issues. 

j-his invention relates to a computerized voting informa- ^j^j^p SUMMARY OF THE INVENTION 
tion system and more particularly to the value-added 

manipulation of data and information that relates to the '^^^^ invention provides a method of constructing, and a 

identification of voters, certification of voting cards, and lO system comprising, a functional framework, operational 

casting, collecting and tabulation of the casted votes. structure, and systems architecture for an integrated, multi- 
purpose voting information system. The preferred embodi- 

BACKGROUND OF THE INVENTION meat of the present invention includes voting cards, a 

^ . J . . ^ . ... database scheme and computerized means for performing 

_ He computerized votmg intormation system which the collecting, verification, manipulation, and manaecracnt 

includes means to automatically verify, collect and mter- ^.^^ ^^j^^^j information with respect to a voter 

change voting data and information, encompasses net- ^^at wants to cast a vote. 

worked hardware components and distributed software pro- „ . , j ^ . j- ^ . 

grams and will be used by a variety of voting entities in cards wh.ch wll be issued to the .ndiv,dual 

connection with the process of certifving voters, determin- ff f'^"^' 'dcntificat.on devices (ix as a voung 

ing the eligibility of voters, compiling and tabulating the ^° P^^^^°9- f«P««nted by smart cards that have a 

casted votes, and providing a secure operations scheme for I J T'. with sjUcon chips and 

the voting system software embedded into the card package. The smart voUng 

_ , J . ■ - L • . • '^^'^ identify the rightful cardholder and guarantee the 

■Ric intended purpose of the invention is to help solve noting eUgibiUty of that particular individual when arriving 

several problems that are experienced by our society with ^„,i„g p„^„^^ -j^^ implementation of the voting cards 

respect to the voting process: low attendance rates, increas- pocket-sized computeis allows the voter's card to operate 

ingadmmuitrative& operations costs, ume consuming tabu- ^jt^in ^ stand alone system, fully integrated systems 

lation tasks, mconvemence for voters, lost time from work, environments, or both, as well as with proprietary, incom- 

ngid voting guidehnes, and inadequate security protecUon. p^tibi^ ^y^^^ platforms. The database scheme faciliutes 

This mvention provides solutions to these problems whUe integration and networking of the voters and all voting 

automating the operaUonaJ tasks that are associated with the entities within a single system so as to allow a real-time 

votmg process, streamlmmg the activities of certifying aU interaction and information exchange between aU systems 

voters, and making the same and most updated data and components while operating in a distributed, decentralized 

information available to all voting entities and related rep- p^cessing environment. The individual databases contain 

resentatives m a real-Ume manner, whenever requested 35 ,^6 voting data, including voting eligibaities. security 

and/or any votmg acUvity was performed with respect to that information, casted votes and overall terms and conditions 

data and information. As evidence of the date of conception that are related to the particular voting campaigns, as weU as 

of this mvention. the appropriate Disclosure Document No. the demographics data and related informationThat relates to 

317274 was forwarded by the mventor Richard P. Sehr on ^ particular voter 

Sep. 8, 1992 to the U.S. Patent and Trademark OfSce. a a- 1 .u • • 

^ . , . , . *" Accordingly, the present mvention provides a secure, 

Heretofore, a variety of voting machines and systems, automated, interactive and integrated voting information 

such as m U.S. PaL No. 4 641^40 issued to R. F. Shoup tem which includes means foridenlifying and recogni-/.- 

Corpora ion, in U.S. Pat No. 4.774.665 granted to Data j the voters, authenticating and certifying the voting cards. 

l1«oT«s°" Management Systems. Inc.. m U.S. Pat. No. verifying the cardholder's voting eligibility, casting and 

5,189 288 f to Texas nstruments Incorporated, in U.S « collecting of votes, tabulating and manipulaling the voting 

Pat No. 5,218,528 granted o Advanced Technological jata and other voting-related information, downloading 

Syslems. Inc. and in U.S. Pat. No. 5.278.753 which was incremental updates automatically to aU databases, linkini 

issued to Charles V. Graft, 11 , have been proposed. Fhese proprietary computing platforms and stand alone off-line 

proposals relate to a variety of specialized dedicated voting ,^„ings. and means for implementing secure protection 

apparatus or integrated systems settings that still rely on the 50 schemes for computerized voting information. 

existing paper-based voting environment or centralized, d„„j ^_ ,1, u- . j f . c • 

on-line networks ^ objects and features of the invention, 

. , r , r . . . advantages of this invention will include reduced adminis- 

None of these systems of the pnor art however, provide trative costs through automated vote entry and retrieval, 

an effective solution to the problems of how to enlist the computerized manipulation of information, conformity to 

majontyofehgible voters during election years and/or other 55 pre-defined procedures as well as reduced paperwork 

voting events, to antrol the costs associated thereof, and to i„,proved productivity through availabiUty of complete and 

implement cost efiEcient security schemes. The Imiitations of accurate voting information, elimination of redundant data, 

these systems center around the fact that these systems are use of pre-designed templates and PC-window screens as 

merely an efficient enhancement to the existing voting well as implementation of knowledge-based techniques, and 

environment with hardware apparatus, which are dedicated 60 better quality of voting results through increased voter 

to a particular voting task, or with on-line systems solutions, participation, fa^er collection and tabulation of votes, more 

which lead to ever increasing communications costs. The streamlined operations as well as immediate availability of 

systems proposals of the prior art also do not -.ddress the up.,„^ate voting information, 
questions of (1) What specific cost savings do the systems 

facilitate, (2) How the systems will function in a stand alone 65 B^'EF DESCRIPTION OF THE DRAWINGS 

configuration, (3) How the systems will interface with ITie following is a list of the terms utilized throughout the 

incompatible, proprietary platforms, (4) How and when the descriptions of this invention: 
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l.ABEL«*a dcscripiive alphanumeric term, or an abbrc- used d\iring the aulheniication process. Once selected, ihe 

viation ihereof, to designate the contents of a box that system verilies the voter card, recognizes if the voter actu- 

follows that label. ally is who he/she says, and if the voter still is eligible for 

BOX-a space allocated to display conventional symbols that particular voting event. In other words, the system 

that arc used in computer work onto computer terminal 5 checks if ihc card is authentic, compares the biometrics that 

screens, including any alphabetic or numerical data. are stored within the card with the voter's "life" biometrics, 

BUTTON-a key similar to a push-button switch or a ^^^^^ ^^^^ ^^^^^ eligible to vote but also that 

functional kev that, when selected, initiates the implemen- he/she hasn't already voted in that particular election. The 

tation of one or more operational tasks the button is pro- ^^ting choices section will be enabled only if the previous 

grammed for. authenticity checks are successful. The voter may then 

SECTlON-a distinct portion of the text and/or graphics '^^^^^^ ^^^^^^ ^^^ing activities, and cast his/her 

thai is displayed onto computer terminal screens. preferred votmg selections, while following the instructions 

FRAMEoa visual border to delimitate one or more that will be displayed onto ihe computer screen. Tlie audit 

headings, labels, boxes, buttons, sections or any text that is ^'^'^^ ^ ^hort history of the voting activities that 

displayed as a table-like structure. ^''''f'' ^''^ Zf' ""n. ^^no^^'c ' 

cr-nccKT .u ui f ii . » u- i. • P^o^f ^ follows: "Nov. 07, 1994 — Stale Proposition 

SCREEN«the ensemble or all text and/or graphics that IS ia n j r i • /cia »>fii' i • . 

, . . . , ^ ^ lA — Proposed Tax Exclusion/SlO Million losses in local 

displayed on the computer terminal screen at any given . ktV^ i-ir- c- 

moment — NO. FIG. 5 is related to the tabulation process that 

...-*r^tv,^. , . , . r r ^ ^^c tabulatlon center to collect and tabulate all 

HhADING^lhe text at the head of a frame, screen, or the votes. This can be done in a real-time manner or at pre- 

summary statement of the information. determined dates by any entity that is authorized to do so. 

which will be displayed followmg that heading, or the status tabulation and certification center sections identify the 

of the mfonnation system at a particular time throughout its appropriate centers that wiU tabulate the casted votes and 

operational functionality. that has certified the voter card. The audit traU section stores 

TEMPLATE-a computer file that contams the styles. 25 the history of the tabulation activities and a non-erasable 

shapes, number, and setlmgs for the individual frames, proof of how many votes ware casted during a particular 

including the components thereof, as well as the overall voting event and with respect to which voting subject. An 

format and content of the screens that wiU be opened by that example of such an audit trail is as follows: Nov. 11. 

t^^Pla^e- 1994— J. C. Smith/State Senate— YES«7^43,198/NO-l. 

FIG. 1 is a block diagram that illustrates a typical systems 30 273^42/Abstain»125,742. 

environment whereby one or more voting stations interface piG. 6 through FIG. 8 illustrate the flow chart of the 

with several certification centers, tabulation centers, and process performed by an embodiment of a system according 

voters alike. t^ tjj^ present invention: FIGS. 6A and 6B describe the flow 

HG. 2 through FIG. 5 iUustrate the various predefined, chart for the process that automatically verifies the voter's 

tailored templates that will be used by the system and/or 35 card, including the data that is stored therein, and provides 

displayed on the computer terminal screen: FIG. 2 visualizes the guidelines and methodology needed by the voter to cast 

the format and content of pop-up and/or pull-down menus his/her voting selections when arriving at the voting station, 

that will be displayed onto the terminal screen: Section 1 FIG. 7 illustrates the flow chart for the process that facili- 

explains the status of what happened as a result of a tates the certification of the voter card, including the loading 

particular command, function or process being executed. 40 of security data into the card and data exchange with the 

Section 2 describes the avaUable choices and recommenda- other voting entities. FIG. 8 shows the flow chart for a 

tions about how to proceed within the operational program, process that automatically tabulates the casted voles and 

as well as the outcomes that are associated therewith. FIG. summarizes the findings thereof. 
3 shows the template structure that will be used to display 

and manipulate the voter data, security features, and other 45 DESCRIPTION OF A PREFERRED 

voting-related information within a format suitable to be EMBODIMENT 

loaded into, or retrieved firom, the voting card and one or all FIG. 1 depicts the major components of a preferred 

of the databases. The demographics section includes data system in accordance with the principles of the invention, 

such as the voter's name, SSN (Social Security Number), This block diagram illustrates the major voting entities that 

and address. The levels of protection section contains the 50 are interacting within the computerized voting information 

data and information that is related to the different security system ("system"). The voting station 1 encompasses a 

schemes employed by the voter card, the voter per se, and plurality of physical locations, such as ofiSce or residential 

the voter's eligibility to participate in a particular voting buildings, where the voters can cast their votes. The tabu- 

evenl. In other words, these data will define the right to lation center 2 represents a variety of voting entities, such as 

access the card (i.e. via PIN, fingerprint, etc.), the additional 55 government or private organizations, that arc authorized to 

security features a voter may want to employ to protect collect and tabulate the casted votes. The certification center 

his/her card (i.e. a particular biometrics), and the voting 3 encompasses official entities, such as government agencies 

events the voter is eligible to cast his/her vote for/against or private represent! lives, that are empowered to act like a 

(i.e. presidential elections in the USA). The audit trail public notary service to certify the voting cards. ITie voters 

section stores a short history of the voting activities that 60 4 represent the individuals that are entitled to participate in 

particular voting card was used for. Such a non erasable a particular voting process and/or any other survey, 

proof is as follows: "Jun. 07, 1994 — primary election— city/ The Databases 10, 20 and 30 correlate to the appropriate 

chief of police — YES." FIG. 4 illustrates the structure to be voting entities, such as voting stations 1, tabulation centers 

used by the voters for the actual voting process when 2 and certification centers 3 respectively. These databases 

arriving at the voting station to cast their votes. 'Ilie authen- 65 contain the data records and all appropriate information, as 

ticalion process section starts the dialogue with the voter well as the template files that are needed to implement the 

while requesting the voter to select the security options to be system's operational functions, including communications 
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and data security management. The smart card reader 11 the voting card is not authentic if the check fails. Second, if 
allows the PC-machine 14, or any other computer terminal, the check is successful, block 106 will verify the cardhold- 
to read data from, or to write data into, the voting card 13 er's legitimacy while comparing one or more of the card- 
thai is inserted, or placed in the vicinity of, the smart card holder's biometrics characteristic (i.e. fingerprints, voice, 
reader. The biometrics box 12 allows the PC to capture the 5 signature, retina, etc.) against the corresponding biometrics 
biometrics characteristics, such a fingerprints, voice, digital thai are stored within the vt)ting card per se. In addition, the 
signature or retina of a particular cardholder, so that the cardholder's identity can be visually verified (i.e. to match 
system can compare this biometrics data with the one stored the picture and/or name on the drivers license with those 
in the system's databases or voting cards. The PC-machine imprinted onto the voting card). As shown by block 106.1, 

14, which is shown as a point-of-voting station for the voting the cardholder's biometrics wUl be captured via the biomet- 
station 1, represents any number of such stations that can be box for the above comparison. Therefore, this ofif-line 
stand alone stations or configured as client-server networks, method of verifying the voter's biometrics, makes sure that 
or an integral part of mainframe-based MIS (Management the voter who is presenting the voting card, actually is the 
Information Systems) computer platforms that are located at legitimate cardholder. On-line authorization calls, 'on the 
the premises of any of the voting stations. The PC-monitor ^5 other hand, can only verify that the voting card is authentic. 

15, or any other computer terminal screen, represents the Block 107 determines if the comparison is successful or not: 
media for displaying any data, including text and graphics, if not, then block 107.1 fligs the fact that the card bearer is 
onto the PC-screen. The link 23 between the major voting not the legitimate cardholder. If successful, then a third 
entities and databases per se, as well as the link 16 between authentication check is p- trmed. Block 108 wiU verify if 
the local systems components, can be implemented by any the voter is eligible to pa...:ipate in that particular voting 
commercial available wire-based or wireless communica- campaign. In other words, block 108.1 will inquiry the 
tions technology, including telephone and modem equip- voting station's database to see if the voter is eligible to vote 

at this time and whether the voter has already voted in that 
The basic feature of the voting system is that the distrib- election. Starting with FIG. 6B, block 109 will verify the 
uted databases 10, 20 and 30 always will contain the same 25 appropriate eligibility. If not eligible, then block 109.1 will 
data that is required to qualify a voter for voting purposes as display the message about the voter not being eligible to vote 
wellastheresultsof the casted votes. ITie availability of the and the system will stop and flag the voting station to 
latest data is guaranteed by the system's build-in mechanism proceed with another voter. If eligible, then block 110 will 
of exchanging data in a real-time manner. In other words, if proceed with the actual voting activities while providing the 
changes or voting activities are performed by or at any of the 30 related instructions and allowing the voter to cast his/her 
voting entities, all other entities will be automatically receiv- voting choices. Block 110.1 supports these activities and 
ing this new data. Such an incremental exchange is not only provides the necessary data, information, and templates. At 
fast and reliable, but also cost effective because of signifi- this time, block 111 automatically establishes an audit trail 
cant lower communications expenditures. In addition, the concerning the voting process and communications 
voting card, which can act as a portable database and/or 35 exchange of voting data. A "who did what-when-where" 
off-line processing unit, also will free the system from audit trial will be stored by the system as a means of 
lengthy and costly on-line modus of operandi while provid- record-keeping and proof that a particular voter was quali- 
ing the bridge for stand alone and/or incompatible systems fied by that voting station to caste his/her votes, voting 
configurations. In the above systems context, FIG. 6 through selections were made by that voter, and voting data was 
FIG. 8 that illustrate the flowcharts describing in more detail 40 loaded into the database of the voting station and the voting 
the operations of the information system in FIG. 1, will now card as well as forwarded and received, together with a time 
be considered: stamp, by the other voting entities (i.e. tabulation and 
Starting with FIG. 6 A, block 100 indicates that a system certification centers). In this context, whenever a voting 
user can instruct the voting system to perform the voting entity performs changes and/or updates to existing 
process and to select and execute a variety of operational 45 information, the other voting entities, including the voting 
functions under the auspices of the applications program, as card, will automatically receive this new data in a real-time 
shown by block 100.1, and the assistance and guidance of manner via the communications lines they are connected to 
the command buttons, template files (i.e. shown by FIGS. 2 or via the portable voting card. In this way, a network of 
through 5) and pull-up/pop-down menus (FIG. 2 depicts, for individual databases acts and behaves as being a single 
example, such a menu in more details), as shown by block 50 database but with improved reliability (i.e. no redundant 
100-2. data, complete information, no obsolete data, etc. ), 
Block 101 indicates that the voter will present his/her increased efiBciency (i.e. real-time access to data, automated 
voting card to a representative at the voting station when manipulation of data, etc.) and reduced cost (i.e. less corn- 
arriving for voting purposes. The representative directs the municalions time, easier to install and maintain, less 
voter to an available station (i.e. desktop or portable PC). As 55 personnel, etc.) as compared to a large, centralized database, 
shown by block 102, the voter inserts the voting card into, Block 111.1 provides the database of the voting station and 
or positions the voting card in the vicinity of, the card reader. the voting card for the above audit trail. At the same time. 
Block 102.1 connects the voting card with the information the voting status of that particular voter will be updated, both 
system and block 102.2 displays the voting template, which in the voting station *s database and voting card per se, so as 
is illustrated in FIG. 4, onto the PC-screen. Starling with 60 to inhibil the voter from casting multiple votes in the same 
block 103, the voter follows the menus and instructions that election, in the context of the voting process previously 
are associated with the voting process. First, block 104 described, the voting activities can be performed also at the 
checks the voting card^s authenticity to see if the card voter's home provided there is a PC and on-line communi- 
conforms to the authenticity file shown by block 104.1 and cations link to a voting station present, 
has no fraudulent components. Block 105 implements this 65 Starling with FIG. 7, block 200 indicates that a system 
check while verify ing the vol ing card's certification number, user can instruct the information system to perform the 
and as shown by block 105.1, cautions the system user that certification process and to select and execute a variety of 
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Operational functions under the auspices of the applications 
program, as shown by block 200.1, and the assistance and 
guidance of the command buttons, template files (i.e. shown 
by FIGS. 2 through 5) and pull-up/pop-down menus (FIG. 2 
depicts, for example, such a menu in more details), as shown 5 
by block 200.2. 'llie herewith described process represents 
the foundation for the system's competitive advantage, 
including security features and cost effectiveness. The cer- 
tification center will make sure that the voters are who they 
say they are, certify all voting cards by loading one or more lo 
of the voter's biometrics characteristics into the voting card, 
and electronically inform all voting stations and tabulation 
centers about the existence and voting eligibility of that 
voter. In this way, whenever the voter arrives for voting 
purposes, the voting station does not have to manually/ 15 
visually verify the legitimacy of that voter. In other words, 
rather then relying upon a centralized voting database that is 
difficult and expensive to maintain and update, the invention 
will use a decentralized concept that is based upon distrib- 
uted voting capabilities. Therefore, the resulting process is 20 
not only secure, due to the tamper proof voting cards, but 
also cost effective, due to personnel savings and less paper- 
work. 

Block 201 indicates that the voter arrives at the certifi- 
cation center to have a card issued or new/additional voting 25 
rights loaded into his/her voting card. As shown by block 
203, the certification center starts the certification process 
with the verification of the voter's identify. Block 202.1 
provides the necessary data, such as the voter's drivers 
license/SSN card and government database, that is needed 30 
for this verification process. Block 203 performs this veri- 
fication process and if successful, then block 204 will 
proceed, otherwise block 203.1 display the message that the 
voter couldn't be identified and no card can be certified for 
that voter. In the case of a positive identification, block 204 35 
allows the entry of the voter's demographics data into the 
voting card within the section entitled 'Voter- 
Demographics." Block 204.1 provides the voting card per se 
and the appropriate data from the database of the certifica- 
tion center. Block 204.2 displays the voting card template 40 
and means to support this data entry process. The loading of 
the appropriate levels of protection is next. Block 205 allows 
the entry of these security data into the voting card within 
the section entitled "levels of protection." The card-security 
data relates to the method of protecting the access to the 45 
voting card, the voter-security data to additional protection 
levels the voter may want to load into the voting card, and 
the voting-rights data to the elections the voter is eligible to 
participate within. Block 205.1 provides the voters psycho- 
logical and/or behavioral characteristics, such as 50 
fingerprints, eye, signature, voice, etc., that will be loaded 
via the biometrics box into the voting card. This biometrics 
data is tamper proof and can be changed only by the 
certification center. After the data relating to the voter and 
the levels of protection is loaded into the voting card, the 55 
certification center will load, as shown by block 206, a secret 
certification number into the voting card that is unique, not 
erasable, and invisible but to the certification center. Block 
206.1 provides the voting card and the database of the 
certification center for this certification number. This num- 60 
ber will be used also by the voting stations to authenticate 
the voting card. As shown by block 207, after all data is 
loaded into the voting card, the certification center will 
forward the certification number and related data to the other 
voting entities so as to inform them about the existence of a 65 
legitimate voting card. Block 207.1 provides the databases 
of the tabulation and certification centers for the forwarded 
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data. At this time, block 208 automatically establishes an 
audit trail concerning the certification process and commu- 
nications exchange of the above data. A "who did what- 
when-where" audit trial will be stored by the system as a 
means of record-keeping and proof that a proper voting card 
was issued to an qualified voter and appropriate data was 
loaded int{) the database of the certification center and the 
voting card as well as forwarded and received, together with 
a time stamp, to the other voting entities (i.e. voting station 
and tabulation center). 

Starting with FIG. 8, block 300 indicates that a system 
user can instruct the information system to perform the 
tabulation process and to select and execute a variety of 
operational functions under the auspices of the applications 
program, as shown by block 300.1, and the assistance and 
guidance of the command buttons, template files (i.e. shown 
by FIGS. 2 through 5) and pull-up/pop-down menus (FIG. 2 
depicts, for example, such a menu in more detail), as shown 
by block 300 J2. The herewith described method and process 
facilitates the collection and tabulation of the casted votes. 
The tabulation center can tap into the database of the voting 
stations at any time and retrieve the voting data the tabula- 
tion center is authorized to collect and process. 

Block 301 indicates the beginning of such a tabulation 
process with regards to collecting, tabulating, and distrib- 
uting the voting results. Block 302 verifies if the tabulation 
center is authorized to manipulate the voting data of that 
particular election. As indicated by block 302.1, the tabula- 
tion center's authorization file will be sending an inquiry to 
the voting station the votes are requested from. Block 303 
performs this verification to see if the tabulation center is 
authorized to tap into the voting data of the voting station. 
If this verification is not successful, then block 303.1 will 
display the message about not being authorized to tabulate 
the voles. If this verification process is positive, then block 
304 will proceed with reading the voting data and verifying 
if the data is authentic. Block 304.1 shows the databases of 
the voting station and that of the tabulation center that 
provide the necessary information for this check-and- 
balance. In this way, the tabulation center also can determine 
if the voting data does not come from an authorized voting 
station or if the data was tampered with in transit. Block 305 
provides the findings of this verification process and informs 
accordingly. If the verification was unsuccessful, then block 
305.1 will display the message to disregard the voting data 
and to retrieve a different data. If the verification was 
successful, then block 306 will proceed and read the entire 
voting data and tabulate it accordingly. Block 306.1 provides 
the data -source for this tabulation task, such as the tabulation 
template and the voting station. Block 307 will calculate the 
cumulative number of the votes and group them with respect 
to the voting selections. As shown by block 307.1 these 
findings will be displayed within the tabulation template. If 
the tabulation is accomplished, an appropriate audit trail will 
be established by block 308 to proof the completion of the 
tabulation process as well as when and from where the 
voting data was retrieved and to whom it was forwarded. As 
shown by block 308.1, an appropriate audit trail will be 
stored within the tabulation center's database as well as 
loaded ir.lo the voting card. Last but not least, block 308.2 
indicates that the system will display and distribute the 
tabulation results as necessary. 

What is claimed is: 

1. A portable voting card, comprising: 

database storage means for storing voting data in said 
portable voting card issued to a voter; said voting data 
comprises: 
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voter demographics data; 

security data including card access control information, 
data protection schemes, and voting eligibility data 
for said voter; said card access control information 
comprising a personal idcniificaiion number to pre- 
vent unauthorized use of the card; and 

audit trail data including informalion about the status of 
votes casted by said voter; 
data input/output means for inputting said voting data in 

and for retrieving the data from the card; 
a predefined content template, comprising: 

a demographics data section including a predetermined 
arrangement of the voter's personal data elements; 

a protection data section including a predetermined 
arrangement of data elements; said data elements 
comprising: 

card security data to control usage of the card; 
voter security data to authorize access to a particular 

card data element; and 
voting right data to qualify said voter for voting 

services; and 

a voting activity data section including an audit trail of 
the activity performed via the card; said audit trail 
comprising: 

the date of the activity being performed; 
a description of the activity; 
the particular topics the activity relates to; and 
the kind of vote casted during the activity; and 
a predefined voting template, comprising: 

an authentication process section including a predeter- 
mined arrangement of a plurality of options com- 
prising: 

card verification option to authenticate the card; 
voter recognition option to identity said voter; and 
voting rights option to validate said voter's voting 

eligibility; and 
a voting choices section, comprising: 
voting instructions; 
list of voting topics to select from; 
description of the impact associated with a particular 

selection being made; and 
the options available to cast a particular vote. 

2. The card in claim 1 wherein said portable voting card 
is a smart card comprising a memory for storing said voting 
data including said predefined templates. 

3. The card in claim 2, further including processing means 
for performing arithmetic and logical operations on said 
voting data including said predefined templates. 

4. The card in claim 1 wherein said data input/output 
means comprises: 

means for compiling a plurality of data elements from 

among the inputted data; 
means for storing the compiled data elements into the 

content template or voting template; 
means for locating a particular template data element; and 
means for retrieving the located data element from said 

particular template. 

5. The card in claim 1, further including means for 
displaying the card data onto said predefined content tem- 
plate or said predefined voting template. 

6. The card in claim 5, further including means for 
coupling via a data communication link the card to an 
external database to exchange at least a portion of said 
voting data between the card and the database; said data 
exchange comprising means for detecting and interchanging 
incremental changes/updates performed to data elements 
stored in or displayed onto the card templates. 
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7. The card in claim 6, further including means for loading 
a ceriiticalion number into the card to authenticate a par- 
ticular voting card including said voting data stored in the 
card, comprising: 

means for storing by a certification center said certifica- 
tion number tamper-proof in the card; and 

means for communicating said certification number to a 
plurality of remote voting stations that are authorized to 
provide voting services to said voter. 

8. A method for voting, comprising: 
authenticating the identity of a person by a certification 

center, including: 

determining at least one voting right said person is 

eligible for; and 
storing said person identity and said voting right in a 
portable voting card; 

validating, by the center, the data stored in the card with 
a certification number and storing the number tamper- 
proof in said portable voting card; 

communicating via a data communication link said cer- 
tification number to a plurality of remote voting sta- 
tions said person is eligible to receive voting service 
from; 

issuing said portable voting card to said person; 

presenting at a later time said portable voting card to a 
voting terminal located at any particular one of said 
plurality of remote voting stations: 

comparing said certification number stored in the card 
against the number communicated by said public cer- 
tification center to said particular voting station; and 

accepting said person for said voting service if the two 
numbers match or denying service requested via the 
card if the numbers don't match; 

said person identity and said voting right in the card 
comprising: 

storing a predefined content template in the card, 
including: 

inputting voter demographics data into the template; 
inputting card security data into the template to 

control use of the card by said person; 
inputting voter security data into the template to 

control access of said person to a predetermined 

set of card data elements; 
inputting voting right data into the template to define 

the services said person is eligible to receive via 

said portable voting card; and 
inputting audit trail data into the template to establish 

proof of said voting service being rendered to said 

person; and 

storing a predefined voting template in the card, includ- 
ing: 

compiling from among the inputting content tem- 
plate data a plurality of authentication options, 
comprising a card verification option, a voter 
identification option and a voting rights option; 

storing the compiled options as a predetermined 
arrangement of data elements within the voting 
template. 

9. The method in claim 8 wherein comparing said certi- 
fication number further comprising: 

displaying said plurality of authentication options onto 

said predefined voting template; 
selecting a particular authentication option and verifying 

the card including identifying the person presenting the 

card for service, and 
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if verifying and identifying are sijcccssl\il then: dis- 
playing said voting right said person is eligible to 
exercise via the voting card and accepting said 
person for said voting service; and 

otherwise: denying service requested via the voting 5 
card. 

10. TTie method in claim 9 wherein accepting said person 
for said voting service further comprising the step of deter- 
mining if said person is still eligible to receive a service 
requested via a particular voting right, including if said 
service is documented by said audit trail data as being 
already rendered; and 

if still eligible then: displaying onto the voting template a 

plurality of choices available for said requested service; 
selecting any of said plurality of choices and loading the 

choice into the content template; 
documenting the rendering of said service including 

updating the card*s audit trail data to reflect said scr\'icc 

being provided; and 
communicating to all voting stations authorized to accept 

said person for said requested service that the service 

has been rendered to said person; and 
otherwise: denying the rendering of said requested service 

or selecting a different voting right. 

11. The method in claim 10 wherein displaying onto the 25 
voting template a plurality of voting choices available, 
further comprising: 

displaying voting instructions relating to the choices 

available for said requested service; 
displaying a hst of voting subjects and topics to select 30 

from; 

displaying explanations about the impact associated with 

a particular selection being made; and 
displaying the type of voting possible for a particular 

voting choice. 35 

12. A system for remote voting, comprising: 

a plurality of remote voting stations authorized to render 

a voting service to a voter; 
a data communication link between and among said 
plurality of remote voting stations including between 
the voting stations and an electronic terminal said 
voting service can be provided on-line; said electronic 
terminal being remote from the voting stations; 
data input/output means for inputting data into or retriev- 
ing data from a portable voting card issued to a voter; 
database storage means for storing voting data in said 
portable voting card; said voting data comprising: 
a predefined content template including voter demo- 
graphics data, card and voter security data, voting 
eligibility data, and audit trail information about the 
activity performed via the card; and 
a predefined voting template including card verification 
data, voter identification data, voting rights data, and 
voting selection information about the choices avail- 
able to said voter; 
a certification center qualifying said voter for remote 
voting including storing a certification number in said 
portable voting card; 
data communication means for communicating said cer- 
tification number to said plurality of remote voting 
stations; 

means for selectively coupling at a later time said portable 
voting card to said electronic terminal; 

means for logging-on via said electronic terminal to any 65 
particular one of said plurality of remote voting sta- 
tions; said log-on means comprising: 
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means for displaying onto said electronic terminal said 
predefined voting template; 

means for verifying on-line the card's authenticity and 
the voter's identity; said verification means compris- 
ing: 

means for comparing said certification number 
stored in the card against the number forwarded by 
said certification center to said particular remote 
voting station; 
means for accepting said voter for on-line voting 
service if the comparison is successful; and for 
denying service if the numbers don't match; 
means for retrieving from said particular voting station 
a set of voting information associated with said 
on-line voting service; 
means for displaying the voting service information 
onto the voting template and for selecting from 
among the displayed information the service includ- 
ing an absentee vote to be rendered; 
means for verifying said audit trail data stored in the 
content template to determine if said absentee vote 
wasn't already casted by said voter; and 
means for communicating the status of the rendered 
service including said absentee vote casted by said 
voter to said plurality of remote voting stations 
including said particular voting station; and 
means for loading the service activity status data includ- 
ing the casted vote into said predefined content. 

13. The system in claim 12, further including a data 
communication link between said certification center and 
said electronic terminal for communicating voting rights 
eligibility information and for inputting via said data input/ 
output means the communicated information into said por- 
table voting card. 

14. A voting system, comprising: 

a plurality of remote databases including a certification 
database maintained by a certification center, a voting 
database maintained by a voting station, a tabulation 
database maintained by a tabulation center, and a 
portable database maintained by said certification 
database, said voting database, and said tabulation 
database; said portable database being included in a 
portable voting card issued to a voter; 

data communication means linking said plurality of 
remote databases into an integrated communications 
network; 

database storage means for storing voting data including 
voting rights qualifying said voter for a voting service 
in a distributed manner between and among said plu- 
rality of remote databases; 

a data input/output device for inputting data into or 
retrieving data from the remote databases; 

a data display device for displaying data stored in, input- 
ted into, or retrieved from the individual databases; 

decision logic means for validating authorization of said 
voter to receive said voting service based on the 
verification of information stored in the card presented 
to a particular voting station; said decision logic means 
including: 

me^i.ns for verifying a certification number stored pre- 
viously in the card by said certification center against 
a corresponding certification number communicated 
by the center to and stored in said voting database; 
and 

means for accepting the card for service if the card 
number matches the database number; and for deny- 
ing service if the numbers don*t match; and 
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means for automatically communicating changes or 
updates made to said voting data between and among 
said plurality of remote databases in real-lime when- 
ever the data changes/updates are performed in any 
particular one of said plurality of remote databases, so 
that each of the remote databases including the card is 
updated in real-lime and automatically in response to 
said data changes/updates performed to contain the 
same and most current set of data for said voting data; 
said database storage means further comprising: 

means for storing a predefined content template in said 
portable voting card, including; 
meaas for compiling from among said voting data a 
set of voter information including voter demo- 
graphics data, card security data, voter security 
data, voting eligibility data, and audit trail data; 
and 

means for inputting said set of voter information into 
the content templale; 
means for storing a predefined voting template in said 
portable voting card, including: 
means for compiling from among the content tem- 
plate data a set of authentication information 
including card verification data, voter identifica- 
tion data, and voting right data; and 
means for inputting said set of authentication infor- 
mation into the voting template; 
means for validating, by said certification center, the 
inputted data and for communicating said validation 
data including said certification number to said vot- 
ing station including said particular voting station 
and said tabulation center; and 
means for loading said certification number into said 
portable voting card. 

15. The system in claim 14 wherein said portable voting 
card is a smart card comprising a memory for storing at least 
a portion of said voting data including said certification 
number used to authenticate the card for said voting service. 40 

16. The system in claim 14 wherein said decision logic 
means for authorizing said voting service further comprises: 

means for displaying said predefined voting template; 
means for verifying said set of authentication information 

stored in the card against an authenticity file and a ^5 

voting rights file stored in said voting database; and 
means for qualifying said voter for said voting service if 

the verification is successful; said qualification means 

comprising: 

means for displaying onto the voting template a plu- 
rality of voting choices relating to the authorized 
voting service; said plurality of voting choices 
including voting instructions, voting subjects to 
select from, and explanations of the impact associ- 
ated with a particular voting choice; 

means for selecting any particular one of said plurality 
of voting choices and for storing the selected choice 
in said predefined content template; and 

means for communicating proof of service being ren- 
dered and of voting performed to said plurality of 
remote databases; and means for loading said 
selected particular voting choice into said portable 
voting card including for storing the content's tem- 
plate audit trail data section proof of a particular vote 
being casted. 



20 



25 



30 



35 



50 



55 



60 



17. Tht system in claim 16, further including: 

means for verifying if said voter has already received said 
voting service including already voted at any voting 
station including said particular voting station; said 
verification means comprises verifying the card audit 
trail data to determine if said voter is still authorized to 
vole; and 

means for denying sersMce including voting by said voter 
if the service was previously rendered to said voter. 

18. Ttie system in claim 14 wherein said communication 
means further comprises: 

means for communicating voting data entries or an accu- 
mulation of entries made in a particular database to any 
of said plurality of remote databases not coupled to said 
particular database at the time of said initial data 
entries; 

means for selectively coupling a remote database to said 
particular database and for comparing the particular 
database data with the remote database data; and 

means for automatically updating said remote database 
with the particular database data if a discrepancy is 
detected between the compared data including between 
a data element stored in said particular database and the 
corresponding data element stored in said remote data- 
base. 

19. The system in claim 14, further including means for 
tabulating the rendered services including votes casted at 
said voting station, said tabulation means comprising: 

means for displaying a predefined tabulation template, 
including: 

a tabulation center section comprising a predetermined 
arrangement of data elements relating to said tabu- 
lation center; 

a certification center section comprising a predeter- 
mined arrangement of data elements relating to said 
certification center; and 

an audit trail section comprising a predetermined 
arrangement of data elements relating to said voting 
service provided including the votes casted by vot- 
ers; 

means for querying, by said tabulation center, a pre- 
defined set of voting data stored at said particular 
voting station; 

means for determining if said tabulation center is autho- 
rized to retrieve the voting station data and for retriev- 
ing the data if authorized; 

means for verifying if the retrieved data is authentic 
including if the data originates from an authentic voting 
station and if the data was not tampered with during 
transit; 

means for compiling from among the retrieved data a 
summary of voting activities performed and for storing 
said summary into the tabulation template; 

means for displaying the tabulation template data and for 
communicating the tabulated data to said voting station 
and said certification center; and 

means for storing and for maintaining audit trail data 
witl.in the tabulation template; said audit trail data 
comprising a cumulative amount of all votes casted 
during a particular voting event including a breakdown 
of the votes per voting issue. 
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